$ rpki-client -vvf rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.mft File: F69314440BEB879DDDA166C5976A2F1F6A19E031.mft (raw, json) Hash identifier: FTCeOiR8AHvrv4JYOy+VN/WlGlvdu0CYCTegCerQDEk= Subject key identifier: 77:0D:2A:B6:E1:0D:96:CE:7B:72:B5:01:D4:C2:94:95:79:78:F4:AE Authority key identifier: F6:93:14:44:0B:EB:87:9D:DD:A1:66:C5:97:6A:2F:1F:6A:19:E0:31 Certificate issuer: /CN=F69314440BEB879DDDA166C5976A2F1F6A19E031 Certificate serial: 5ABA2FFB5C5E0DBD2D96BF0FB0C0AAFA7C9F9224 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F69314440BEB879DDDA166C5976A2F1F6A19E031.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.mft Manifest number: 29 Signing time: Mon 01 Jun 2026 15:40:21 +0000 Manifest this update: Mon 01 Jun 2026 15:35:21 +0000 Manifest next update: Tue 02 Jun 2026 19:13:21 +0000 Files and hashes: 1: 3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa (hash: wQESs7cDBFebpdzSgETJh4YhQNH9K+ZjQ7a77NcaHp8=) 2: 323430333a313838303a3a2f33322d3332203d3e203436303535.roa (hash: 0dsqJtJ46wdaXhRYrKKKJ2werWCm6VUK7dh9hbyOntI=) 3: 3130332e3139382e3132302e302f32332d3234203d3e203436303535.roa (hash: aeQ9NN7n3Js6ilpMlf3iKltx6poDEG/MLFH04LVivcI=) 4: F69314440BEB879DDDA166C5976A2F1F6A19E031.crl (hash: u9Z4k8K7WablHMTUqofTxGOoSiQDShVgl4NgjZl0+YY=) 5: 3230322e35322e34382e302f32332d3234203d3e203436303535.roa (hash: 2iUHhReRTogx2RhTVdfCvVoaJpAuDQddykI0WZaNgaI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.crl rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F69314440BEB879DDDA166C5976A2F1F6A19E031.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Jun 2026 09:30:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:ba:2f:fb:5c:5e:0d:bd:2d:96:bf:0f:b0:c0:aa:fa:7c:9f:92:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F69314440BEB879DDDA166C5976A2F1F6A19E031 Validity Not Before: Jun 1 15:35:21 2026 GMT Not After : Jun 2 19:13:21 2026 GMT Subject: CN=770D2AB6E10D96CE7B72B501D4C294957978F4AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:98:8d:69:4e:33:75:06:cf:9e:20:25:ef:0c: f6:2f:d3:df:d0:97:14:d0:0a:7f:a7:5f:17:f9:ba: 2d:a6:49:0e:08:f4:2b:d7:b5:9d:12:f0:14:78:ea: b2:2a:09:83:59:d3:c5:1a:15:ae:36:5a:e1:16:4d: f5:54:bb:6c:17:8e:18:0e:76:33:c7:e8:fc:34:43: 89:8a:27:4a:c5:06:3c:f5:29:d2:ed:aa:a0:7e:79: e8:ab:b3:f0:df:b2:7f:e4:37:72:99:f7:58:3d:36: 53:a6:a5:8a:26:1c:9a:a2:81:1b:f9:d6:29:8e:7e: df:25:6b:65:d3:7d:b6:6a:8b:fb:91:15:00:a2:99: 61:8b:c9:ab:ac:f3:35:96:f9:eb:bf:e2:71:26:6c: c1:f6:d0:b0:d0:01:e9:b8:9c:5b:63:3e:33:10:68: 1a:d2:3a:d9:80:0e:52:2e:d4:79:53:16:59:1e:41: 83:45:20:97:3d:0d:ff:90:f2:e3:65:99:0e:12:f9: b0:8a:74:18:00:42:4d:2b:43:13:fb:ae:2d:3f:bd: 5f:57:70:14:b3:8c:a6:b2:1f:31:1b:8b:8f:fa:f1: 62:bb:1b:1f:4d:78:98:06:04:83:f3:8b:c9:ac:19: 44:98:da:ce:5e:16:98:49:6a:c2:1c:69:46:d2:be: 53:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:0D:2A:B6:E1:0D:96:CE:7B:72:B5:01:D4:C2:94:95:79:78:F4:AE X509v3 Authority Key Identifier: keyid:F6:93:14:44:0B:EB:87:9D:DD:A1:66:C5:97:6A:2F:1F:6A:19:E0:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F69314440BEB879DDDA166C5976A2F1F6A19E031.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/F69314440BEB879DDDA166C5976A2F1F6A19E031.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:25:46:8c:4a:d6:a0:8e:d7:aa:27:bf:36:6a:ca:fd:4a:bc: 0b:7e:22:00:ef:cb:cd:3d:ce:75:14:4c:d0:df:3d:84:73:37: 34:1b:24:89:65:b7:b4:9e:1e:60:ed:1c:a2:a1:68:b5:75:a9: d5:4d:50:10:2f:80:7c:ad:c9:c1:08:21:a7:d5:97:2a:ff:bc: 2a:0c:19:c0:f0:07:67:ff:71:01:92:e2:75:e0:2c:28:d5:eb: 49:44:9a:92:df:84:2f:56:30:dc:b3:7c:4a:92:da:95:5a:a2: b0:59:cb:bf:13:ea:b8:51:a8:9b:71:f1:b6:c6:7f:6c:0a:2f: 23:c4:bb:af:e6:68:fc:d7:35:38:61:64:29:9c:f8:53:ce:14: ed:3f:18:f4:27:1a:54:0a:4e:0f:92:43:02:de:84:87:af:d7: a9:61:df:4d:b1:5d:a4:24:3e:b6:fb:c3:3c:1e:ea:a8:1f:da: b1:a8:83:3b:12:84:c0:d3:8d:d0:d7:8c:5d:0b:12:c0:36:44: 50:c0:f0:71:91:c3:f6:9c:12:13:a3:43:64:c5:26:e5:45:9f: 42:9a:94:fe:ab:1a:08:9a:e2:51:dd:aa:f1:e2:e7:0a:b4:d0: 32:57:8e:34:2f:14:e8:84:8b:ea:3c:fe:37:46:ae:88:57:d5: 6a:d0:08:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWrov+1xeDb0tlr8PsMCq+nyfkiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjY5MzE0NDQwQkVCODc5REREQTE2NkM1OTc2QTJGMUY2 QTE5RTAzMTAeFw0yNjA2MDExNTM1MjFaFw0yNjA2MDIxOTEzMjFaMDMxMTAvBgNV BAMTKDc3MEQyQUI2RTEwRDk2Q0U3QjcyQjUwMUQ0QzI5NDk1Nzk3OEY0QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCAmI1pTjN1Bs+eICXvDPYv09/Q lxTQCn+nXxf5ui2mSQ4I9CvXtZ0S8BR46rIqCYNZ08UaFa42WuEWTfVUu2wXjhgO djPH6Pw0Q4mKJ0rFBjz1KdLtqqB+eeirs/Dfsn/kN3KZ91g9NlOmpYomHJqigRv5 1imOft8la2XTfbZqi/uRFQCimWGLyaus8zWW+eu/4nEmbMH20LDQAem4nFtjPjMQ aBrSOtmADlIu1HlTFlkeQYNFIJc9Df+Q8uNlmQ4S+bCKdBgAQk0rQxP7ri0/vV9X cBSzjKayHzEbi4/68WK7Gx9NeJgGBIPzi8msGUSY2s5eFphJasIcaUbSvlPlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdw0qtuENls57crUB1MKUlXl49K4wHwYDVR0j BBgwFoAU9pMURAvrh53doWbFl2ovH2oZ4DEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDgzOTc3ZjQtOGMyZC00ZWIxLWI0Y2QtMzViNDkyMTZlMDczLzAvRjY5MzE0NDQw QkVCODc5REREQTE2NkM1OTc2QTJGMUY2QTE5RTAzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNjkzMTQ0NDBCRUI4NzlERERBMTY2QzU5NzZBMkYxRjZBMTlF MDMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDgzOTc3ZjQtOGMyZC00ZWIxLWI0 Y2QtMzViNDkyMTZlMDczLzAvRjY5MzE0NDQwQkVCODc5REREQTE2NkM1OTc2QTJG MUY2QTE5RTAzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0lRoxK1qCO16onvzZqyv1KvAt+IgDvy809 znUUTNDfPYRzNzQbJIllt7SeHmDtHKKhaLV1qdVNUBAvgHytycEIIafVlyr/vCoM GcDwB2f/cQGS4nXgLCjV60lEmpLfhC9WMNyzfEqS2pVaorBZy78T6rhRqJtx8bbG f2wKLyPEu6/maPzXNThhZCmc+FPOFO0/GPQnGlQKTg+SQwLehIev16lh302xXaQk Prb7wzwe6qgf2rGogzsShMDTjdDXjF0LEsA2RFDA8HGRw/acEhOjQ2TFJuVFn0Ka lP6rGgia4lHdqvHi5wq00DJXjjQvFOiEi+o8/jdGrohX1WrQCEE= -----END CERTIFICATE-----Generated at Tue Jun 2 01:15:56 2026 by rpki-client